Commit graph

73 commits

Author SHA1 Message Date
35988e7888 feat(coturn): update configuration for secret management
Removed comment clutter and streamlined the configuration for better readability and maintenance. Ensured the sops secrets and ACME certificate handling remain functional.
2025-04-15 10:26:46 +02:00
4cb03eb58f feat(nextcloud): upgrade to Nextcloud 31
Updated the Nextcloud package from version 30 to 31. This ensures access to the latest features and improvements while maintaining compatibility with the system configuration.
2025-04-14 15:16:24 +02:00
7494fd7efd refactor: improve formatting and update dependencies
Reformatted configuration files for better readability and consistency. Updated lock file dependencies to the latest revisions, ensuring compatibility and performance improvements.
2025-02-25 08:56:02 +01:00
ce865160b8 chore(nix): comment out rustdesk configuration
Rustdesk configuration has been temporarily disabled in the system modules. This might be to address an issue or for future refactoring.
2025-02-24 10:56:30 +01:00
e009207a30 feat(rustdesk): enable firewall configuration
Added `openFirewall` option to `rustdesk-server` service to simplify network setup.
2025-02-24 10:31:40 +01:00
18d7710302 feat(rustdesk): update relay host configuration
Updated the relay host for RustDesk server from "mx.surfsite.org" to "rustdesk.hoyer.world". This ensures the service uses the new designated host for signal relay.
2025-02-24 10:22:49 +01:00
f2a984c762 feat(rustdesk): enable SSL and update proxy configuration
Enabled `forceSSL` for the RustDesk nginx configuration to ensure secure connections. Replaced `proxyPass` with detailed `extraConfig` to include necessary headers and support for WebSocket connections.
2025-02-24 10:19:46 +01:00
64f48c5969 feat(mx): isolate rustdesk configuration into separate module
Moved rustdesk-server settings from `default.nix` to a dedicated module `rustdesk.nix`. This improves configuration structure and ensures better modularity for maintainability.
2025-02-24 10:08:19 +01:00
3778bf29d0 feat(rustdesk): configure relayHosts for rustdesk-server
Added `relayHosts` configuration to rustdesk-server to specify the relay host `mx.surfsite.org`. This ensures proper routing and connectivity for the RustDesk service.
2025-02-24 09:12:54 +01:00
a686d21d39 feat(mx): enable RustDesk server service
Added configuration to enable the RustDesk server service in the MX system. This facilitates remote desktop functionality out of the box.
2025-02-24 08:31:09 +01:00
47cf44ccfd refactor: improve formatting in Nextcloud and home config
Reformatted code blocks for better readability and consistency in Nextcloud and Darwin home configurations. No functional changes were made, ensuring existing behavior remains intact.
2024-12-13 09:19:09 +01:00
27d41ed91d feat(nextcloud): update service dependencies and apps
Include `config` in function parameters for better configurability. Removed unnecessary Nextcloud apps such as `files_texteditor`, `files_markdown`, `twofactor_backupcodes`, and `twofactor_totp` to streamline service setup.
2024-12-06 13:23:47 +01:00
aef4e331ae feat(nextcloud): add extra apps configuration
Enhance Nextcloud setup by enabling additional applications such as calendar, contacts, and notes. This change improves the service's functionality and usability by integrating essential productivity tools directly into the Nextcloud environment.
2024-12-06 13:20:39 +01:00
b0f42bce29 fix(systemd): correct path for nixos-upgrade service
Change the working directory from `/root` to `/root/nixcfg` in the `nixos-upgrade` systemd service to ensure the correct configuration repository is used. This update prevents potential errors due to fetching and resetting in the wrong directory.
2024-11-29 17:07:52 +01:00
1e5ceb6c73 feat(systemd): add git to nixos-upgrade service path
Include git in the `PATH` for the `nixos-upgrade` systemd service. This change ensures that the service can execute git commands during its operations. The path addition resolves issues related to unavailable git commands.
2024-11-29 17:06:07 +01:00
cd99b128d4 feat: add preStart hook for nixos-upgrade service
Introduce a preStart hook to the nixos-upgrade systemd service to ensure the local repository is updated before upgrades by fetching and resetting to the origin's HEAD. This enhances the reliability and consistency of the upgrade process. Also, maintain the commented out old flake path for backward traceability.
2024-11-29 17:04:24 +01:00
82c7352bc2 set /root for mx
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-11-29 16:57:32 +01:00
4390f2ae09 chore: remove redundant git filter rot8000 config
Remove duplicate configurations for the rot8000 git filter from both mx and base modules. This change helps to streamline the code by ensuring that the unnecessary and redundant configurations are eliminated.
2024-11-29 13:36:00 +01:00
0767577099 Fix rot8000 2024-11-29 12:58:21 +01:00
0101bf1140 feat(nextcloud): add support for JXL previews
Enable JXL (JPEG XL) format previews in Nextcloud configuration. This addition allows users to view and manage JPEG XL images directly within Nextcloud, enhancing the user experience with modern image formats.
2024-11-29 08:55:50 +01:00
3953362456 refactor: update configurations and fix inconsistent naming
Refactor various NixOS and home-manager configurations to improve consistency and readability. Correct naming inconsistencies, ensure proper indentation, and restructure Samba settings for better clarity and maintainability.
2024-11-28 10:01:53 +01:00
900f95169f nix fmt
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-11-19 10:31:29 +01:00
7bb3d87ced feat(nextcloud): add maintenance window start setting
Introduces a new configuration for setting the maintenance window start in the Nextcloud settings. This ensures better scheduling and coordination for maintenance activities.
2024-11-13 09:40:54 +01:00
b71b46bdb0 feat(nextcloud): log_type = "file" 2024-11-13 09:28:00 +01:00
82c476bd75 refactor: reorder nextcloud.nix configurations
Reorganized the configuration blocks for better readability. The `enabledPreviewProviders` list and `phpOptions` section now follow a more logical structure.
2024-10-16 14:43:00 +02:00
af5c62eb4b feat(services): add dedicated PostgreSQL module
Introduce a dedicated PostgreSQL configuration module to the system. Adjust Nextcloud and Forgejo configurations to utilize this new module.
2024-10-15 08:58:47 +02:00
6d2951155c feat(nextcloud): update package to nextcloud30
Upgrade Nextcloud package from version 29 to 30. This ensures compatibility with new features and improvements in Nextcloud 30.
2024-10-14 14:26:04 +02:00
92cdf3d349 feat(nextcloud): add WEBP format to supported previews
This commit enhances the Nextcloud configuration by enabling previews for WEBP image files. It adds "OC\\Preview\\WEBP" to the list of supported preview formats.
2024-09-27 16:50:03 +02:00
3d334bd98c feat(nextcloud): add preview provider options and ffmpeg
Include ffmpeg in system packages to support media processing. Enable various preview providers for enhanced file previews in Nextcloud.
2024-09-27 16:40:06 +02:00
442dc5f697 feat(coturn): enhance coturn and firewall config
Update coturn service configuration with new port ranges and enhanced security options. Also, add ACME support for certificate management and configure firewall to allow necessary ports.
2024-09-17 11:06:20 +02:00
ac082f77b0 feat(coturn): set owner and add restart units for secrets
Ensure the coturn static-auth-secret has the correct owner and specifies restart units. This enhances security by assigning ownership and improves reliability by ensuring relevant units restart when secrets change.
2024-09-17 10:30:12 +02:00
da780be326 fix(coturn): correct attribute names and import configuration
Change 'coturn' to 'services.coturn' and renamed 'hostname' to 'hostName'. Added 'coturn.nix' to the default imports in the main configuration file.
2024-09-17 10:19:55 +02:00
c894294ce3 feat(coturn): introduce coturn configuration
Add coturn service definition for x86_64-linux systems with static-auth-secret and additional settings for Nextcloud integration. Includes secrets management via `sops` and secure TLS configurations.
2024-09-17 10:14:33 +02:00
4c100acb27 fix: remove extraneous newlines in hardware-configuration.nix
Removed unnecessary blank lines to improve readability and maintain consistency with the formatting guidelines. This change does not impact functionality but cleans up the code.
2024-08-26 10:14:03 +02:00
b2b0a9fc7d fix: correct indentation in mailserver configuration
The indentation in the mailserver.nix file was fixed to follow proper syntax guidelines. This was a minor change, but it improves code readability and adherence to stylistic standards.
2024-07-11 12:14:36 +02:00
31073cd9d5 feat: Add new email alias to mailserver configuration
This commit adds a new email alias to the mailserver configuration. This new addition will allow emails sent to this address to be properly routed and received.
2024-07-05 10:19:35 +02:00
6ea458a7ee feat: Update email aliases in mailserver config
This commit updates the list of email aliases for various users in the mailserver configuration. It reorders existing aliases and introduces new ones, extending their visibility in different domains. This offers aliases under the hoyer.social and hoyer.world domains, enhancing flexibility for users.
2024-07-05 10:15:02 +02:00
16b99018c9 feat: Update certificate scheme in mailserver
This commit updates the certificate scheme configuration on the mailserver. The `certificateScheme` and `acmeCertificateName` have been added, and an unnecessary certificate reference in the `acme.nix` file has been deleted.
2024-07-05 09:54:35 +02:00
82d9b3b6b2 feat: Remove dnsProvider from acme.nix
This commit removes the dnsProvider attribute ("internetbs") from four entries in the acme.nix file. These changes aim to reduce redundancy and maintain simplicity in the script.
2024-07-05 08:41:11 +02:00
fd150b5133 feat: Remove dnsProvider in acme.nix
This commit removes the dnsProvider property from the "varlink.org" configuration within the acme.nix file. This step contributes to system simplification and potential adaptability improvements.
2024-07-05 08:29:32 +02:00
2ff75f77be feat: Add new domain to acme.nix
Added "herward-hoyer.de" as a new domain in the acme.nix file. Set "internetbs" as the DNS provider and added "*.herward-hoyer.de" to the extra domain names.
2024-07-04 16:44:41 +02:00
11f5887eeb feat: Update default DNS provider and domain configurations
The DNS provider has been changed from "internetbs" to "cloudflare". Moreover, configurations for multiple domains have been updated and expanded, including "mx.surfsite.org", "surfsite.org", "hartwin-hoyer.de", "varlink.org", "hoyer.xyz", and others.
2024-07-04 16:43:17 +02:00
17dc0aa1cb feat(acme.nix): add Cloudflare as DNS provider
A new DNS provider, Cloudflare, has been added to the configuration for domain "harald-hoyer.de" in the acme.nix file. This change will affect the handling of DNS requests for this domain.
2024-07-04 16:35:52 +02:00
b273548370 feat: Add new domain in acme.nix
The commit includes the addition of the "meike-hoyer.de" domain to the acme.nix file, using "cloudflare" as the DNS provider. This update enhances the system's domain coverage.
2024-07-04 15:24:38 +02:00
4bfa600291 feat: Add 'meike-hoyer.de' to mail server configuration 2024-07-04 13:40:32 +02:00
f1b9120991 feat: Remove myprivacy.tools from mailserver configuration
This update removes the myprivacy.tools domain from the configuration of the mailserver. As a result, no incoming or outgoing messages will be processed for this domain. Also, all email addresses related to myprivacy.tools were also removed.
2024-07-01 16:44:53 +02:00
7a72ecaea9 feat: Comment out goaccess in mx/default.nix
The goaccess.nix import has been commented out in the mx/default.nix file. This change signifies that the goaccess feature is currently not being utilized or is under maintenance.
2024-06-27 16:18:37 +02:00
b437541252 feat: Update nix runner docker image URL
This commit updates the docker image URL for the nix runner in the forgejo.nix configuration. The new URL points to the image hosted at git.hoyer.xyz/harald/nix-runner:latest. This change is
2024-06-27 15:12:12 +02:00
3eba20c0dc feat: Increase nginx clientMaxBodySize limit
Increased the clientMaxBodySize in nginx configuration from 100M to 1000M. This change allows larger client request bodies,
2024-06-27 14:53:01 +02:00
0a0ae0db8c feat: increase nginx client max body size
This change updates the nginx configuration in the x86_64-linux system. It adds a new parameter, clientMaxBodySize, which is set to allow larger payloads of up to 100M, improving our capacity to handle bigger client requests.
2024-06-27 14:51:12 +02:00